CWE-79

CVE-2021-44211

February 23, 2023 by

OX App Suite through 7.10.5 allows XSS via the class attribute of an element in an HTML e-mail signature.

CVE-2021-44212

February 23, 2023 by

OX App Suite through 7.10.5 allows XSS via a trailing control character such as the SCRIPTt substring.

CVE-2021-44213

February 23, 2023 by

OX App Suite through 7.10.5 allows XSS via uuencoding in a multipart/alternative message.

In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API.

CVE-2021-44263

February 23, 2023 by

Gurock TestRail before 7.2.4 mishandles HTML escaping.

CVE-2021-44266

February 23, 2023 by

GUnet Open eClass (aka openeclass) before 3.12.2 allows XSS via the modules/auth/formuser.php auth parameter.